Added more CORS headers